ICS Advisories

Risk evaluation

Schneider Electric is aware of a vulnerability in its [Uni-Telway driver](https://www.se.com/us/en/product-range/573-unitelway/#overview) which is part of [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unity-pro/#overview), [EcoStruxure™ Process Expert](https://www.se.com/ww/en/product-range/65406-ecostruxure-process-expert), [EcoStruxure™ Process Expert for AVEVA System Platform](https://www.se.com/ww/en/product-range/55570689-ecostruxure-process-expert-for-aveva-system-platform/#overview) and [OPC Factory Server](https://www.se.com/ww/en/product-range/547-opc-factory-server/) products. Failure to apply the mitigations provided below may risk denial of service of engineering workstation, which could result in interruption of engineering operation.

Mitigation summary

For customers requiring the use of Uni-Telway driver, Schneider Electric recommends using following mitigations to reduce the risk of exploit:• McAfee Application and Change Control software for application control. Refer to the Cybersecurity Application Note available https://www.se.com/ww/en/download/document/EIO0000004778/ • Follow workstation, network and site-hardening guidelines in the Schneider Electric [Recommended Cybersecurity Best Practices](https://www.se.com/ww/en/download/document/7EN52-0390/) document. For customers not requiring the use of Uni-Telway driver, Schneider Electric recommends uninstalling the driver. Version 16.2 of EcoStruxureTM Control Expert, version 2025 of EcoStruxureTM Process Expert, version 2025 of EcoStruxureTM Process Expert for AVEVA System Platform, and version 3.63SP3 of OPC Factory Server do not include Uni-Telway driver by default anymore. This vulnerability is only affecting customers who have installed Uni-Telway driver.